Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-16 11:14Distribution SiteLocky
bulkreasy.com
KEY-SYSTEMS GMBH (n/a)
2016-09-16 11:14Distribution SiteLocky
salemwitchcat.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-09-16 11:14Distribution SiteLocky
samenart.com
ONLINENIC, INC.88.198.249.236 (- Germany)
2016-09-16 11:14Distribution SiteLocky
maggycocoa.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-16 11:14Distribution SiteLocky
nipeldogalgaz.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]77.245.154.98 (- Turkey)
2016-09-16 11:13Distribution SiteLocky
mahovik-bg.com
ENOM, INC.92.43.113.68 (- Poland)
2016-09-16 11:13Distribution SiteLocky
fgspro.com
ONLINENIC, INC.91.206.226.84 (- Ukraine)
2016-09-16 11:12Distribution SiteLocky
bulkreasy.com
KEY-SYSTEMS GMBH (n/a)
2016-09-16 11:12Distribution SiteLocky
maggycocoa.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-16 11:12Distribution SiteLocky
demo.website.pl
Consulting Service Sp. z o.o.193.218.152.105 (- Poland)
2016-09-16 08:01Payment SiteCerber
wjtqjleommc4z46i.z97f9v.bid
Eranet International Limited (n/a)
2016-09-16 07:37Payment SiteCerber
4kqd3hmqgptupi3p.1zp109.bid
Eranet International Limited (n/a)
2016-09-16 05:01Payment SiteCerber
unocl45trpuoefft.nmit4p.bid
Eranet International Limited (n/a)
2016-09-16 01:33Payment SiteCerber
4kqd3hmqgptupi3p.inforcing.pw
AlpNames Limited (n/a)
2016-09-16 01:10Payment SiteCerber
52uo5k3t73ypjije.xjb384.bid
Eranet International Limited (n/a)
2016-09-16 00:49Payment SiteCerber
unocl45trpuoefft.bjahwh.bid
Eranet International Limited (n/a)
2016-09-15 21:31Payment SiteCerber
52uo5k3t73ypjije.aclox4.bid
Eranet International Limited (n/a)
2016-09-15 21:25Payment SiteCerber
unocl45trpuoefft.hyr1h3.bid
Eranet International Limited (n/a)
2016-09-15 20:01Payment SiteCerber
unocl45trpuoefft.hur45z.bid
Eranet International Limited (n/a)
2016-09-15 19:04Payment SiteCerber
wjtqjleommc4z46i.cc0r87.bid
Eranet International Limited (n/a)
2016-09-15 16:08Payment SiteCerber
unocl45trpuoefft.ytbyhs.bid
Eranet International Limited (n/a)
2016-09-15 15:28Payment SiteCerber
unocl45trpuoefft.rgbb50.bid
Eranet International Limited (n/a)
2016-09-15 11:36Payment SiteCerber
4kqd3hmqgptupi3p.endsdoubt.loan
Alpnames Limited (n/a)
2016-09-15 11:32Distribution SiteLocky
mika.tohmon.com
NETWORK SOLUTIONS, LLC.216.177.130.19 (- United States)
2016-09-15 11:32Distribution SiteLocky
insideinsights.net
WILD WEST DOMAINS, LLC23.229.175.169 (- United States)
2016-09-15 11:32Distribution SiteLocky
fenwaycourier.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 11:31Distribution SiteLocky
discoverstillwater.com
GODADDY.COM, LLC104.196.178.8 (- United States)
2016-09-15 11:30Distribution SiteLocky
sapanboon.com
NAME.COM, INC.210.1.51.131 (- Thailand)
2016-09-15 11:30Distribution SiteLocky
oliveservicedapartments.com
DOMAINSITE, INC.192.124.249.118 (- United States)
2016-09-15 11:30Distribution SiteLocky
lusanmaster.com
NETEARTH ONE INC. D/B/A NETEARTH112.137.167.47 (- Malaysia)
2016-09-15 11:29Distribution SiteLocky
keratin.sk
85.248.29.36 (- Slovakia)
2016-09-15 11:29Distribution SiteLocky
salarypra1.net
ONLINENIC, INC.210.1.58.189 (- Thailand)
2016-09-15 11:28Distribution SiteLocky
lowcostveterinarios.com
GODADDY.COM, LLC68.65.122.224 (- United States)
2016-09-15 11:28Distribution SiteLocky
sandpiperchorus.us
TUCOWS DOMAINS INC.23.235.192.117 (- United States)
2016-09-15 11:28Distribution SiteLocky
bigfishcasting.com
GODADDY.COM, LLC97.74.144.193 (- United States)
2016-09-15 11:27Distribution SiteLocky
eiti.co.il
80.244.168.32 (- Israel)
2016-09-15 11:26Distribution SiteLocky
charlcote1.net
TUCOWS DOMAINS INC.198.46.81.187 (- United States)
2016-09-15 11:25Distribution SiteLocky
dendang.net
WEB COMMERCE COMMUNICATIONS LIMI[...]210.5.47.92 (- Malaysia)
2016-09-15 11:24Distribution SiteLocky
1natureresort.com
DOMAIN.COM, LLC50.116.67.11 (- United States)
2016-09-15 11:24Distribution SiteLocky
insieutoc.com
ONLINENIC, INC.125.212.219.132 (- Vietnam)
2016-09-15 11:24Distribution SiteLocky
iassess.net
GODADDY.COM, LLC (n/a)
2016-09-15 11:23Distribution SiteLocky
trudprom.ru
R01-RU87.236.19.118 (- Russian Federation)
2016-09-15 11:23Distribution SiteLocky
rimpro.ru
REGTIME-RU144.76.99.226 (- Germany)
2016-09-15 11:22Distribution SiteLocky
credit-it.com
DEUTSCHE TELEKOM AG80.150.6.143 (- Germany)
2016-09-15 11:21Distribution SiteLocky
allovercoupon.com
GODADDY.COM, LLC67.222.14.205 (- United States)
2016-09-15 11:21Distribution SiteLocky
lacumpa.biz
ENOM, INC.209.124.66.15 (- United States)
2016-09-15 11:21Distribution SiteLocky
electua.org
Internet Invest, Ltd. dba Imena.[...]193.110.162.146 (- Ukraine)
2016-09-15 11:21Distribution SiteLocky
hawaiipoliticalinfo.org
GoDaddy.com, LLC50.63.202.35 (- United States)
2016-09-15 11:20Distribution SiteLocky
techboss.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]77.245.149.11 (- Turkey)
2016-09-15 11:19Distribution SiteLocky
mumbomedia.nl
Mijn InternetOplossing B.V.5.22.250.203 (- Netherlands)
2016-09-15 11:19Distribution SiteLocky
kf-design.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]91.185.209.164 (- Slovenia)
2016-09-15 11:19Distribution SiteLocky
zharikoff.ru
RU-CENTER-RU185.12.92.184 (- Russian Federation)
2016-09-15 11:18Distribution SiteLocky
iandistudio.com
GODADDY.COM, LLC194.102.215.57 (- Romania)
2016-09-15 11:18Distribution SiteLocky
espaciosamadhi.com
WILD WEST DOMAINS, LLC (n/a)
2016-09-15 11:18Distribution SiteLocky
bet4good.org
GoDaddy.com, LLC207.55.245.200 (- United States)
2016-09-15 11:17Distribution SiteLocky
ocscexpo.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-15 11:17Distribution SiteLocky
onefilmy.com
GODADDY.COM, LLC (n/a)
2016-09-15 11:17Distribution SiteLocky
gearstuff.net
NETWORK SOLUTIONS, LLC.162.252.104.174 (- United States)
2016-09-15 11:16Distribution SiteLocky
delicefilm.com
GODADDY.COM, LLC94.73.150.60 (- Turkey)
2016-09-15 11:16Distribution SiteLocky
pasbardejov.sk
81.162.94.254 (- Slovakia)
2016-09-15 09:56Distribution SiteLocky
vilakolpa.com
TUCOWS DOMAINS INC.66.49.197.111 (- Canada)
2016-09-15 09:55Distribution SiteLocky
lorihoneycutt.com
GKG.NET, INC.192.185.71.161 (- United States)
2016-09-15 09:54Distribution SiteLocky
brainfreezeapp.com
GODADDY.COM, LLC (n/a)
2016-09-15 09:54Distribution SiteLocky
nomad-gps.com
ONLINENIC, INC.92.46.121.108 (- Kazakhstan)
2016-09-15 09:54Distribution SiteLocky
sekerpinarcicek.com
IHS TELEKOM, INC.185.131.50.174 (- Turkey)
2016-09-15 09:54Distribution SiteLocky
mortaltraffic.com
ENOM, INC.8.5.1.50 (- United States)
2016-09-15 09:54Distribution SiteLocky
ichinoyado.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]157.112.181.25 (- Japan)
2016-09-15 09:53Distribution SiteLocky
pegglenights.org
1 & 1 Internet AG82.223.26.214 (- Spain)
2016-09-15 09:53Distribution SiteLocky
sbaky.com
GODADDY.COM, LLC50.63.202.51 (- United States)
2016-09-15 09:52Distribution SiteLocky
ismaily.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-15 09:52Distribution SiteLocky
knightsbridgeboutique.com
EVERYONES INTERNET, LTD. DBA SOF[...] (n/a)
2016-09-15 09:52Distribution SiteLocky
swapol.net
WILD WEST DOMAINS, LLC (n/a)
2016-09-15 09:52Distribution SiteLocky
tymelprof.ru
AGAVA-RU81.177.141.15 (- Russian Federation)
2016-09-15 09:51Distribution SiteLocky
akeseverin.com
REGISTER.IT SPA192.230.80.37 (- United States) +1 A record(s) 192.230.83.37 (AS19551, - United States)
2016-09-15 09:51Distribution SiteLocky
mikbaro.com
10DENCEHISPAHARD, S.L134.0.11.63 (- Spain)
2016-09-15 09:50Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:50Distribution SiteLocky
monsalwa.com
GODADDY.COM, LLC104.24.126.56 (- United States) +1 A record(s) 104.24.127.56 (AS13335, - United States)
2016-09-15 09:49Distribution SiteLocky
forex-trading.nl
Flexwebhosting BV46.17.2.169 (- Netherlands)
2016-09-15 09:48Distribution SiteLocky
fedoriv.net
ONLINENIC, INC.46.4.172.254 (- Germany)
2016-09-15 09:48Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:47Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:46Distribution SiteLocky
beytascam.com
REGISTER.COM, INC.185.42.172.189 (- Turkey)
2016-09-15 09:46Distribution SiteLocky
esmahatun.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]185.85.191.230 (- Turkey)
2016-09-15 09:45Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:45Distribution SiteLocky
bingolfm.com
IHS TELEKOM, INC.94.138.207.226 (- Turkey)
2016-09-15 09:44Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:44Distribution SiteLocky
siamitcool.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.13.30.45 (- Thailand)
2016-09-15 09:43Distribution SiteLocky
nablussweet.com
GODADDY.COM, LLC69.164.214.65 (- United States)
2016-09-15 09:43Distribution SiteLocky
smokingbrushfineart.com
ENOM, INC.109.75.171.120 (- United Kingdom)
2016-09-15 09:42Distribution SiteLocky
gray-associates.co.uk
Fasthosts Internet Ltd195.8.197.130 (- United Kingdom)
2016-09-15 09:42Distribution SiteLocky
geototalgroup.com
TUCOWS DOMAINS INC.70.33.246.120 (- Canada)
2016-09-15 09:41Distribution SiteLocky
xn--o3cafudv5hceh20a.com
ONLINENIC, INC.210.1.60.27 (- Thailand)
2016-09-15 09:41Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:11Payment SiteCerber
52uo5k3t73ypjije.fi50le.bid
Eranet International Limited (n/a)
2016-09-15 06:31Payment SiteCerber
unocl45trpuoefft.hvh2gb.bid
Eranet International Limited (n/a)
2016-09-15 04:42Payment SiteCerber
52uo5k3t73ypjije.catfills.mobi
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-15 01:23Payment SiteCerber
wjtqjleommc4z46i.4bb9vz.bid
Eranet International Limited (n/a)
2016-09-14 22:41Payment SiteCerber
52uo5k3t73ypjije.vmotsf.bid
Eranet International Limited (n/a)
2016-09-14 20:51Payment SiteCerber
52uo5k3t73ypjije.pr2zwz.bid
Eranet International Limited (n/a)
2016-09-14 20:12Distribution SiteLocky
pawlrubia.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >